Exchange 2003 tons of queued messages


We had a problem last week which was an ISP problem in the end. While troubleshooting we opened the server for relay and gave access permissions to any IP address.

After the problem was fixed we all setting were put back as they were before the problem.
SMTP virtual server connection control has only postini listed (we use postini).

No relay permissions, clients only use exchange from the internal netwrok through outlook or owa.

Today I've realized the queue was filled with thousands of messages and lots of connections for many different domains.

Anonymous access is checked under access control, but as far as I know that doesnt mean the server will be an open relay but will only accet email with local mailboxes as it's destination.

I tried deleting the messages but they tyhey keep filling the queue.

I can't tell where are coming from when opening the messages from the queue. Just the "spoofed" sender but no IP address.


I will really appreciate any help.

Thanks
Diego
reliantcorpAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Alan HardistyCo-OwnerCommented:
Did you restart the SMTP service after making the changes to permissions.  If not - you are still an open relay.

Test on www.checkor.com

If you are still an open relay, you will no doubt have popped up on a blacklist or two so please check on www.mxtoolbox.com/blacklists.aspx
0
kcoectCommented:
You can delete the messages from the queue directory on the server (not in the Exchange System Manager), I forget exactly where (and it depends on which drive you installed Exchagne on), but there is a folder called Queue (I think that's it).

I would stop the SMTP services completely, clear out the queued up spam, verify that your set not to be an open relay (you need anonymous authentication for inbound connections as people connecting to you to send email to you are anonymous, no other way for them to authenticate), and only then restart the SMTP service.  You might want to enable SMTP logging on the SMTP virtual server while your at it for troubleshooting...
0
reliantcorpAuthor Commented:

I'm getting connection refused from several open relay tools adn the address is not listed on any blacklist.

Might be coming from an infected computer ? it's just to many messages.
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

Alan HardistyCo-OwnerCommented:
Okay - who is the sender of the spam in your queues?

Postmaster or random external domain name users?
0
reliantcorpAuthor Commented:

Random senders from lots of different domains.

I've now enabled connection filtering and sender filtering but the queue keeps filling up. And growing.

I don't get it.

Help !!!!

0
reliantcorpAuthor Commented:


Even with smtp stopped queue keeps growing.... ?!?!
0
reliantcorpAuthor Commented:

Forget last post, smtp was running
0
Alan HardistyCo-OwnerCommented:
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Alan HardistyCo-OwnerCommented:
Queues will keep growing as your server can't keep up with what it has been sent, so it didn't have everything in the queue when you stopped SMTP and it was playing catch-up.

Quick fix - disable Integrated Windows & Basic Auth on the SMTP Virtual Server then restart the SMTP service.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.